CGRC · Question #660
A SCAP specification that provides unique, common names for publicly known information system vulnerabilities. Response:
The correct answer is A. Common Vulnerability and Exposures (CVE). Common Vulnerability and Exposures (CVE) is a SCAP specification that assigns unique names to publicly known information system vulnerabilities.
Question
A SCAP specification that provides unique, common names for publicly known information system vulnerabilities. Response:
Options
- ACommon Vulnerability and Exposures (CVE)
- BCommon Vulnerability Scoring System (CVSS)
- CContinuity of Operations Plan (COOP)
- DDisaster Recovery Plan (DRP)
How the community answered
(18 responses)- A89% (16)
- C6% (1)
- D6% (1)
Why each option
Common Vulnerability and Exposures (CVE) is a SCAP specification that assigns unique names to publicly known information system vulnerabilities.
Common Vulnerabilities and Exposures (CVE) is a Security Content Automation Protocol (SCAP) specification that provides a standardized naming convention to uniquely identify and describe publicly known information security vulnerabilities.
The Common Vulnerability Scoring System (CVSS) provides a numerical score to quantify the severity of a vulnerability, not a unique common name for it.
A Continuity of Operations Plan (COOP) is a strategic plan for an organization to continue essential functions during an emergency, unrelated to vulnerability naming.
A Disaster Recovery Plan (DRP) focuses on the recovery of IT systems and infrastructure after a disaster, which is distinct from vulnerability identification.
Concept tested: SCAP - Common Vulnerability and Exposures (CVE)
Source: https://cve.mitre.org/about/
Topics
Community Discussion
No community discussion yet for this question.